CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2023-4061
Medium (6.5) in redhat. EPSS 1.0% chance of exploitation in the next 30 days. Fixed in org.wildfly.core:wildfly-controller 22.0.0.Final.
A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from the system.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:jboss_enterprise_application_platform
- redhat:wildfly_core
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-26qx-4m49-6cfr | Maven | org.wildfly.core:wildfly-controller | <22.0.0.Final | 22.0.0.Final |